$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/PROFOND/n3lh4QDYlDCqN06DTBFbH3KjV1k.roa File: n3lh4QDYlDCqN06DTBFbH3KjV1k.roa (raw, json) Hash identifier: QGxQlvRQl/GQdnYhQYT7FDhoapcgM4Ujt5at2SD+Q04= Subject key identifier: 9F:79:61:E1:00:D8:94:30:AA:37:4E:83:4C:11:5B:1F:72:A3:57:59 Certificate issuer: /CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Certificate serial: 0FA5 Authority key identifier: 18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/n3lh4QDYlDCqN06DTBFbH3KjV1k.roa Signing time: Fri 01 Sep 2023 09:37:06 +0000 ROA not before: Fri 01 Sep 2023 09:37:06 +0000 ROA not after: Sat 31 Aug 2024 03:10:53 +0000 asID: 9924 IP address blocks: 210.17.73.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Jun 2024 00:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4005 (0xfa5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18A6663D6E9F80BD4CE7C8ADFEB38783C3E1A464 Validity Not Before: Sep 1 09:37:06 2023 GMT Not After : Aug 31 03:10:53 2024 GMT Subject: CN=9F7961E100D89430AA374E834C115B1F72A35759 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:b9:d8:ce:7c:8a:c9:c3:09:fc:0e:f4:12:b5: 99:e8:54:07:20:90:f0:24:a1:16:a3:00:1f:b2:7b: 5d:d7:a8:d1:d8:28:41:e3:b0:fe:83:24:bc:e8:da: c6:d1:28:8b:03:e0:1f:3c:86:b9:4b:96:56:6b:3f: 9f:5f:01:d1:93:03:be:b6:9c:19:63:07:bb:87:0e: 07:e1:4b:38:fa:cd:68:8f:33:c3:e4:c2:2c:e3:62: 58:a2:5a:df:27:d8:bb:97:8c:3b:ab:c7:e5:9a:78: cc:fb:4b:af:7e:fa:f8:b0:ee:45:91:ec:b3:0b:a1: 3b:48:4f:67:88:24:6e:ef:87:02:74:f5:ac:c0:7f: 1a:89:0c:b3:ae:be:ae:04:98:96:21:3d:64:7f:31: 4a:91:23:5a:29:24:4f:3b:e8:30:44:fa:c8:06:d0: 4d:ab:7d:a8:86:bf:19:fa:3a:95:6f:7c:39:0a:0a: d1:50:27:f4:b9:39:12:fb:83:39:21:cc:23:16:07: 92:52:e2:6a:cb:c5:e7:ff:50:bc:5c:6b:64:d2:7a: be:ac:e1:d6:54:79:ba:3c:bf:cc:dc:e3:3e:c7:89: ac:c7:97:36:af:9a:80:6a:c7:ae:02:ab:bf:79:56: c7:99:3d:af:4e:cd:00:5a:c8:ab:d9:3f:40:7e:f2: 1e:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:79:61:E1:00:D8:94:30:AA:37:4E:83:4C:11:5B:1F:72:A3:57:59 X509v3 Authority Key Identifier: keyid:18:A6:66:3D:6E:9F:80:BD:4C:E7:C8:AD:FE:B3:87:83:C3:E1:A4:64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/GKZmPW6fgL1M58it_rOHg8PhpGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/GKZmPW6fgL1M58it_rOHg8PhpGQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/PROFOND/n3lh4QDYlDCqN06DTBFbH3KjV1k.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 210.17.73.0/24 Signature Algorithm: sha256WithRSAEncryption 16:35:3b:c6:7a:a6:47:90:8d:ed:13:b4:a4:8e:0a:03:57:a2: 7e:26:13:d4:71:8d:89:5f:33:b8:0d:44:75:99:ee:cb:52:9a: 37:a2:cd:2e:05:12:95:16:01:79:93:84:24:d1:81:95:c2:09: 36:77:34:20:26:cf:a5:bd:f9:02:2e:c8:59:fa:74:b4:05:b6: 69:92:ca:82:9f:f4:cc:17:c7:e5:d3:d7:b5:5f:18:20:1d:86: a6:3e:dc:e8:20:5f:bc:88:ff:ac:33:be:04:6c:1d:0a:59:b5: 78:07:c7:68:5c:55:21:5c:84:37:74:b3:d2:50:b4:e2:57:ee: 04:d7:bb:f8:e9:84:59:ec:84:0f:0e:05:9e:0b:d6:27:48:01: 66:fc:8f:59:b7:c1:f6:40:d7:a8:b8:45:d7:b5:e9:b3:3d:f5: 77:1e:34:4c:1e:7e:4c:fc:06:f0:6c:33:ce:bd:33:8a:d2:0f: 50:47:13:37:56:46:a0:27:46:38:8f:01:c6:57:bf:28:e9:55: 03:0c:ba:c7:1c:88:ea:4a:60:d5:98:c3:11:c7:22:ad:b9:59: 6c:78:d3:53:f6:c4:09:0d:f5:23:35:5b:20:a4:9d:8c:7b:50: a2:73:3f:79:24:ee:d5:6e:46:0e:ce:05:f5:90:41:5b:f3:b4: 23:77:f5:93 -----BEGIN CERTIFICATE----- MIIE1DCCA7ygAwIBAgICD6UwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMThB NjY2M0Q2RTlGODBCRDRDRTdDOEFERkVCMzg3ODNDM0UxQTQ2NDAeFw0yMzA5MDEw OTM3MDZaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDlGNzk2MUUxMDBEODk0 MzBBQTM3NEU4MzRDMTE1QjFGNzJBMzU3NTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC1udjOfIrJwwn8DvQStZnoVAcgkPAkoRajAB+ye13XqNHYKEHj sP6DJLzo2sbRKIsD4B88hrlLllZrP59fAdGTA762nBljB7uHDgfhSzj6zWiPM8Pk wizjYliiWt8n2LuXjDurx+WaeMz7S69++viw7kWR7LMLoTtIT2eIJG7vhwJ09azA fxqJDLOuvq4EmJYhPWR/MUqRI1opJE876DBE+sgG0E2rfaiGvxn6OpVvfDkKCtFQ J/S5ORL7gzkhzCMWB5JS4mrLxef/ULxca2TSer6s4dZUebo8v8zc4z7HiazHlzav moBqx64Cq795VseZPa9OzQBayKvZP0B+8h5pAgMBAAGjggHwMIIB7DAdBgNVHQ4E FgQUn3lh4QDYlDCqN06DTBFbH3KjV1kwHwYDVR0jBBgwFoAUGKZmPW6fgL1M58it /rOHg8PhpGQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvUFJPRk9O RC9HS1ptUFc2ZmdMMU01OGl0X3JPSGc4UGhwR1EuY3JsMGAGCCsGAQUFBwEBBFQw UjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9UV05J Q0NBL0dLWm1QVzZmZ0wxTTU4aXRfck9IZzhQaHBHUS5jZXIwDgYDVR0PAQH/BAQD AgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9ycGtp Y2EudHduaWMudHcvcnBraS9UV05JQ0NBL1BST0ZPTkQvbjNsaDRRRFlsRENxTjA2 RFRCRmJIM0tqVjFrLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRwLnR3bmlj LnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME ANIRSTANBgkqhkiG9w0BAQsFAAOCAQEAFjU7xnqmR5CN7RO0pI4KA1eifiYT1HGN iV8zuA1EdZnuy1KaN6LNLgUSlRYBeZOEJNGBlcIJNnc0ICbPpb35Ai7IWfp0tAW2 aZLKgp/0zBfH5dPXtV8YIB2Gpj7c6CBfvIj/rDO+BGwdClm1eAfHaFxVIVyEN3Sz 0lC04lfuBNe7+OmEWeyEDw4FngvWJ0gBZvyPWbfB9kDXqLhF17Xpsz31dx40TB5+ TPwG8Gwzzr0zitIPUEcTN1ZGoCdGOI8Bxle/KOlVAwy6xxyI6kpg1ZjDEccirblZ bHjTU/bECQ31IzVbIKSdjHtQonM/eSTu1W5GDs4F9ZBBW/O0I3f1kw== -----END CERTIFICATE-----Generated at Mon Jun 3 04:21:51 2024 by rpki-client on console-ams.rpki-client.org